Media Access AS
Privacy
How we process information when you use the visibility check or contact Media Access.
Updated 5 September 2026. This statement applies to the contact form, the visibility check, and follow-up in CRM.
Data controller
Media Access AS, organisation number 926 359 363, is responsible for processing personal data related to our website and services. You can contact us via the contact form and mark your message “Privacy”.
When you request contact or a meeting
The contact form collects your name, company, email address, phone number, and an optional message. We use this information to respond to your enquiry and arrange any further contact.
Meeting requests and contact enquiries are handled in Media Access’s in-house CRM. A meeting request is a message indicating that you want to be contacted, not a confirmed calendar booking.
When you try the visibility check
When you start the visibility check, we use the website address to review a selection of responses from OpenAI with web search. The website address is sent to OpenAI. Your name, email address, and phone number are not sent to the analysis provider. The analysis check itself expires after 24 hours.
When you request contact or open the report, Media Access AS stores your name, email address, phone number, company if applicable, message, and report in our CRM with Supabase in the EU. The purpose is to deliver the report and follow up on your enquiry. The option to receive an email copy is recorded separately and is not consent to receive newsletters. Enquiries must be assessed for deletion no later than 12 months after the last contact if no customer relationship is established. You can ask us for access or deletion.
Legal basis for processing
We process enquiries from business contact persons on the basis of our legitimate interest in responding to the request and following up a potential customer relationship, cf. Article 6(1)(f). Any follow-up is linked to what you have requested. Where you yourself are party to an agreement, processing necessary to deliver the agreement or take steps at your request before entering into an agreement may be based on Article 6(1)(b).
Marketing and measurement
Google Ads, Meta, and ChatGPT Ads are listed as relevant marketing channels. Google Tag Manager may be used to manage measurement and tracking tools. This does not in itself describe which information is shared.
This version of the website does not load any marketing pixels or Google Tag Manager. Before such tools are activated, the purposes, recipients, data types, and any required consents must be clarified, and this information must be updated.
Storage and access
CRM data is stored with Supabase in the EU. Sales admin and the employee handling the enquiry have access. We use technical information, including IP address, to limit misuse and repeated requests. Reports without submitted contact details have access that expires after 24 hours. Enquiries that do not lead to a customer relationship are assessed for deletion no later than 12 months after the last contact.
OpenAI is used for the analysis and may process data outside the EEA. The provider’s data processing agreement describes the legal basis for transfers and the safeguards in place, including standard contractual clauses. The contact form’s name, email address, and phone number are not sent to OpenAI.
Your rights
Depending on the processing, you may have the right to access, rectification, deletion, restriction, or to receive the data. Where processing is based on legitimate interest, you may object. Consent can be withdrawn.
You can lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet). Use the contact form and mark your message “Privacy” to request access, rectification, or deletion, or to object to further follow-up.
